Top Banner
SymantecMail Security 8.0.5 for Domino® Installation Guide
22
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Smsdom Install Guide Win

Symantec™ Mail Security8.0.5 for Domino®Installation Guide

Page 2: Smsdom Install Guide Win
Page 3: Smsdom Install Guide Win

Installing Mail Security forWindows

This document includes the following topics:

■ Before you install Mail Security

■ If you are upgrading

■ System requirements

■ About installing Mail Security

■ Installing the product using the installation wizard

■ Performing a silent installation

■ Post-installation tasks

■ Signing the Mail Security databases to certify integrity

■ Granting rights to run unrestricted agents

■ Accessing Mail Security

■ Restricting access to Mail Security databases

■ Installing SymantecMail Security onDPARwith SMSDOMsettings replication

■ Uninstalling Mail Security

Page 4: Smsdom Install Guide Win

Before you install Mail SecurityBefore you install Symantec Mail Security 8.0.5 for Domino, ensure that yourenvironmentmeets the system requirements. The administrator who installs theproduct must have full read and write access to the registry and file system.

See “System requirements” on page 8.

The Mail Security installation program reads the Windows registry to locate theLotus Domino server and default data directories. In addition to Mail Securityregistry keys, Mail Security installs files to the following directories (newdirectories are created as needed).

Table 1-1 lists installation directories.

Table 1-1 Installation directories

DescriptionDirectory

Mail Security engine.[Domino binary directory]

Mail Security databasetemplates (sav.ntf,savlog.ntf, savquar.ntf,and savdefs.ntf).

[Domino data directory]

Mail Security databases(sav.nsf, savlog.nsf,savquar.nsf, andsavhelp.nsf).

If you want to replicatedefinitions to otherDomino servers that arerunning Mail Security,the Definitions database(savdefs.nsf) is createdhere.

[Domino data directory]\SAV

Definition files (used forall Symantec products).

ForWindows (32-bit): \ProgramFiles\CommonFiles\SymantecShared\VirusDefs

For Windows (64-bit): \Program Files (x86)\CommonFiles\Symantec Shared\VirusDefs

Installing Mail Security for WindowsBefore you install Mail Security

4

Page 5: Smsdom Install Guide Win

Table 1-1 Installation directories (continued)

DescriptionDirectory

Standard antispamdefinition files, DynamicDocument Review(DDR)dictionaries,DecomposerEngine files,Signature files for filetypedetection, SymantecPremiumAntiSpamfiles,attachment contentscanning files, RapidRelease scripts, readmetext file, VersionSupportPolicy file, and a PDFversion of the SymantecMail Security 8.0.5 forDomino ImplementationGuide.

\Program Files\Symantec\SMSDOM

Symantec license files.

After you install a licensefor any Symantecproduct, the license fileis placed in the Licensesfolder.

\Program Files\Common Files\Symantec Shared\Licenses

Platform IndependentLiveUpdate technologyto download definitionfiles and programupdates (used for allSymantec products)

ForWindows (32-bit): \ProgramFiles\CommonFiles\SymantecShared\Java LiveUpdate

For Windows (64-bit): \Program Files (x86)\CommonFiles\Symantec Shared\Java LiveUpdate

If you havemultiple Lotus Domino partitions on the same server, the installationprogram detects each one, and lets you specify the partitions on which to installMail Security.

If you installMail Security to a partitioned server on aWindows cluster computer,the installationprogrammight askwhich of theMail Security databases youwantto keep, even if Mail Security was never installed on the computer. Installationproceeds regardless of which option you select.

5Installing Mail Security for WindowsBefore you install Mail Security

Page 6: Smsdom Install Guide Win

Mail Security does not support protecting multiple versions of Domino that arerunningon the samecomputer.Only themost recently installed versionofDominois protected.

To ensure the most secure configuration, the Mail Security extension managerdynamic link library file (nnem.dll) should load before any third-party Dominoextension manager. You should ensure that the nnem.dll is the first entry for theEXTMGR_ADDINS parameter in the notes.ini file.

Some third-party software are Domino add-in tasks and run as a service on theWindows operating system. These services might prevent the Mail Securityextension manager dynamic link library file from loading if they start before theDomino server starts. Therefore, these processes should only start after theDomino server starts.

If you are upgradingYou can upgrade SMSDOM 4.1, 5.1, 7.5, and 8.0 to SMSDOM 8.0.5 (32-bit). Youcan not upgrade any earlier installed versions of Mail Security to 64-bit versionof Mail Security.

A direct support is not available to migrate from 32-bit version of SMSDOM to64-bit. Follow the steps below tomigrate from32-bit version of SMSDOMto64-bit.

To migrate from 32-bit version of SMSDOM to 64-bit

1 Uninstall 32-bit version of SMSDOM.However, youmay retain the SMSDOMdatabases during this process.

2 If Symantec Endpoint Security (SEP) or Symantec Antivirus is not installedon your computer, ensure that virus definitions of the earlier 32-bit versionof SMSDOM are deleted.

These virus definitions are located at the Symantec Shared\VirusDefs folder.

3 Ensure that you upgrade your 32-bit Domino server to 64-bit.

4 Install 64-bit version of SMSDOM on your 64-bit Domino server.

Note: Premium AntiSpam is supported only on Symantec Mail Security forDomino(32-bit) on Windows platform. When you upgrade Mail Security to64-bit your existing Premium AntiSpam license is no longer valid.

Mail Security supports upgrades from version 4.x and higher only. If you arerunning version 3.x or lower, you must uninstall the product and then installversion 8.0.5.

Installing Mail Security for WindowsIf you are upgrading

6

Page 7: Smsdom Install Guide Win

Table 1-2 lists the requirements that you must meet before you can upgrade toversion 8.0.5

Table 1-2 Upgrade requirements

Upgrade requirementVersion

None4.0

If Symantec Premium AntiSpam is enabled, ensure that it isdisabled before you install version 8.0.5

4.1 or 5.x or 7.5 or 8.0x

When you upgrade from version 4.x or higher, you can upgrade your previousdatabases. The databases that you choose to keep during the installation processare upgraded the next time that you start the LotusDomino server. You can verifythat the previous databaseswere properly upgraded by viewing theDomino serverconsole messages. Any new databases are created from templates and are placedin the SAV subdirectory of your default Data directory.

Table 1-3 lists the query attributes or fields inwhich the values aremodified afterupgrading from version 4.x.

Table 1-3 Version 4.x query upgrade values

Value in version 8.0.5Value in version 4.xAttribute or field

The value is set to Monthly.QuarterlyRun Interval

If the Run Interval was daily, thenRun On is set to the weekdays thatare selected.

If the Run Interval was weekly, theRun On default is set to the day ofthe week that you perform theupgrade.

Not applicableRun On

The value is set to ExecutiveSummary.

Summary TotalsOutput Type

The value is set to AdministrativeSummary.

Detailed ReportOutput Type

The value is set to Detail.Detailed Report withSummary Total

Output Type

If the Output Type was SummaryTotals or Detailed Report, then theOutput Format is set to HTML.

XMLOutput Format

7Installing Mail Security for WindowsIf you are upgrading

Page 8: Smsdom Install Guide Win

Table 1-3 Version 4.x query upgrade values (continued)

Value in version 8.0.5Value in version 4.xAttribute or field

The file extension is removed.When you generate a new report,the file name of the output will bein the new format.

Any valueFile Name

The value is set to the default valueAny Author.

Any valueAuthor

The value is set to the default valueAll Servers.

Any valueServer

The value is set toAudited/Delivered document.

Ignored documentAction taken

The value is set to Repaireddocument.

Cleaned documentAction taken

The value is set to Deletedattachment/document.

Removedattachment/document

Action taken

The value is removed. The reportquery is applicable to all threats inversion 8.0.5.

Any valueVirus name selection

System requirementsYou must have administrator-level privileges to Windows and the Lotus Dominoserver to install Mail Security. Your Domino server must be properly sizedaccording to IBM/Lotus specified guidelines.

To installMail Security, your environmentmust alsomeet the followingminimuminstallation requirements:

32-bit version of SMSDOM:

■ Windows Server 2003 (32-bit or64-bit)/WindowsAdvancedServer2003 (32-bitor 64-bit)

■ Windows Server 2008 (32-bit or 64-bit)

64-bit version of SMSDOM:

■ Windows Server 2003 (64-bit)/WindowsAdvanced Server 2003 (64-bit)

■ Windows Server 2008 (64-bit)

Operating system

Installing Mail Security for WindowsSystem requirements

8

Page 9: Smsdom Install Guide Win

32-bit version of SMSDOM:

■ Domino 7.x or 8.x (32-bit)

64-bit version of SMSDOM:

■ Domino 8.x (64-bit)

Lotus Domino

Lotus Notes Client 6.0.x, 6.5.x, 7.0.x, and 8.xLotus Notes

1 GHz Pentium or higherProcessor

512 MB

Performance depends on server load.

Memory

250 MBDisk space to install

300 MB minimum

Youcan change the locationof the temporary filesafter installation.

For information on specifying the directory forprocessing files during scans, refer to SymantecMail Security 8.0.5 for Domino ImplementaitonGuide.

Available disk space for processing

DVD-ROM driveHardware

Microsoft Internet Explorer 6.0 with the mostcurrent service pack.

Internet browser

32-bit version of SMSDOM:

■ JRE 1.5x (32-bit)

64-bit version of SMSDOM:

■ JRE 1.5x (64-bit)

JRE

In addition to system requirements, you must enable Java Runtime Environmentwith JCE Unlimited Strength Jurisdiction Policy files. These policy files aredifferent for different versions of JRE and can be downloaded from the Web siteof Sun Microsystems. You must also have an additional hard disk space ofapproximately 2 GB for LiveUpdate to support caching of files on downloads.

About installing Mail SecurityMail Security installs with default (but customizable) settings that reduce routinemaintenance. For example, anoutbreakmanagement threshold limit is set duringinstallation so that you receivenotificationwhen toomany suspicious documents

9Installing Mail Security for WindowsAbout installing Mail Security

Page 10: Smsdom Install Guide Win

are detected on the LotusDomino server over a set interval. These default settingscan be changed.

If you havemultiple Lotus Domino partitions on the same server, the installationprogram detects each one and lets you specify the partitions on which to installMail Security.

Note:When you installMail Security to a partitioned server on aWindows clustercomputer, the setup program might ask which databases you want to keep, evenif Mail Security was never installed on the computer. Setup proceeds normallyregardless of which option you select.

When the Lotus Domino server is restarted, the following occurs:

The Mail Security databases are created from templates andplaced in the SAV subdirectory of your default Data directory.

For a new installation

The databases that you chose to keep during the installationprocess areupgraded. You canverify that thepreviousdatabaseswere properly upgraded by viewing the Domino server consolemessages.

Any new databases are created from templates and placed inthe SAV subdirectory of your default Data directory.

See “If you are upgrading ” on page 6.

For an upgrade

A ReadMe text file and a PDF version of the Symantec Mail Security 8.0.5 forDomino Implementation Guide are placed in the default directory.

When you are finished installing Mail Security, you can perform thepost-installation tasks.

See “Post-installation tasks” on page 16.

You can install or upgrade Mail Security using the installation wizard that is onthe product DVD. If you are installing or upgrading the product on multiplecomputers, performing a silent installation can simplify the installation process.

See “Installing the product using the installation wizard” on page 11.

See “Performing a silent installation” on page 12.

Installing Mail Security for WindowsAbout installing Mail Security

10

Page 11: Smsdom Install Guide Win

Installing the product using the installation wizardYou can install or upgrade Mail Security using the installation wizard that is onthe product DVD. Mail Security uses the Windows Installer service. Ensure thatthe service is enabled before you begin installation.

To prepare for installation

1 If you use Symantec Premium AntiSpam, ensure that it is disabled.

For more information on enabling and disabling Symantec PremiumAntiSpam, refer to Symantec Mail Security 8.0.5 for Domino ImplementationGuide.

2 Shut down the LotusDomino server. Youmust also shut down the LotusNotesclient, if it is on the same computer.

To install Mail Security

1 Insert the Mail Security installation DVD into the DVD-ROM drive.

The installation program launches automatically. If it does not, runcdstart.exe from the installation DVD.

2 In the Mail Security installation screen, click Install Mail Security 8.0.5 forDomino(32-bit) to begin the installationprocess of 32-bit versionofSMSDOM.

3 In the Mail Security installation screen, click Install Mail Security 8.0.5 forDomino(64-bit) to begin the installationprocess of 64-bit versionofSMSDOM.

4 Read the on-screen instructions, and then click Next to continue.

Indicate that you agree with the terms of the Symantec software licenseagreement, and then click Next.

You must accept the terms of the license agreement for the installation tocontinue.

5 In the Destination Location panel, do one of the following:

■ To install the product in the default location, click Next.

■ To install the product in a different location, click Browse, select thelocation of the installation folder, click OK, and then click Next.The installation directory must end with \SMSDOM

Thepanel only appears if you are performing a new installation or upgradingfrom version 4.0.

6 If you have multiple Lotus Domino partitions on the same server, do thefollowing:

11Installing Mail Security for WindowsInstalling the product using the installation wizard

Page 12: Smsdom Install Guide Win

■ In the Select Partitions panel, select the partitions that youwant to protectwith Mail Security.

■ To select additional partitions, clickAddAdditionalPartitions, and thenin the Select data directory dialog box, type the partition path or browsedirectories to select a path, and then click OK.

7 If you are upgrading Mail Security, when you are prompted whether to keepsettings from the previous versions of the databases, select the databasesthat you want to keep.

The option to keep the Definitions database settings is available only whenMail Security detects that aDefinitions database exists on the server onwhichyou are installing the product.

All available databases are checked by default.

See “If you are upgrading ” on page 6.

8 In the Install LiveUpdate panel, if you want to install LiveUpdate, select theLiveUpdate option. If you choose not to install LiveUpdate on this DominoServer, you must use database replication mechanism to update thedefinitions. For more information on managing multiple servers, refer toSymantec Mail Security 8.0.5 for Domino Implementation Guide.

9 Click Next and read through the remaining panels until you reach theComplete Setup panel, and then click Finish.

10 If prompted, restart your computer, and then start the Lotus Domino server.

Performing a silent installationYou can install or upgradeMail Security silently from the command line. You canthen install the product without having to monitor the installation process orinteract with the installer program.

Table 1-4 shows the parameters that specify whether to retain existing MailSecurity databases when performing a silent upgrade

Table 1-4 Database upgrade parameters

ParameterDescriptionCommand

0 = Do not retain the existingdatabase.

1 = Retain the existingdatabase.

The default value is 1.

Specifieswhether youwant toretain the existing Settingsdatabase.

SMS_KEEPSETTINGS

Installing Mail Security for WindowsPerforming a silent installation

12

Page 13: Smsdom Install Guide Win

Table 1-4 Database upgrade parameters (continued)

ParameterDescriptionCommand

0 = Do not retain the existingdatabase.

1 = Retain the existingdatabase.

The default value is 1.

Specifieswhether youwant toretain the existing Logdatabase.

SMS_KEEPLOG

0 = Do not retain the existingdatabase.

1 = Retain the existingdatabase.

The default value is 1.

Specifieswhether youwant toretain the existingQuarantinedatabase.

SMS_KEEPQUAR

0 = Do not retain the existingdatabase.

1 = Retain the existingdatabase.

The default value is 1.

Specifieswhether youwant toretain the existingDefinitionsdatabase.

SMS_KEEPDEFS

If you do not indicate a value, Mail Security uses the default value 1 — retain theexisting database.

Note: A silent installation installs Mail Security on all of the Domino partitionson the computer.

For more information about silent installation, see the following articles on theWeb site for InstallShield® at the following URLs:

■ http://support.installshield.com/kb/view.asp?articleid=Q105473

■ http://support.installshield.com/kb/view.asp?articleid=Q102572

To perform a silent install

1 On the computer onwhich youwant to installMail Security, do the following:

■ If you use Symantec Premium AntiSpam, ensure that it is disabled.For more information on enabling and disabling Symantec PremiumAntiSpam, refer toSymantecMail Security8.0.5 forDomino ImplementaionGuide.

13Installing Mail Security for WindowsPerforming a silent installation

Page 14: Smsdom Install Guide Win

■ Shut down the Lotus Domino server. You must also shut down the LotusNotes client, if it is on the same computer.

2 Insert the Mail Security DVD into the DVD-ROM drive.

3 At the Windows DOS prompt, change to the following directories on theDVD-ROM:

■ 32-bit version of SMSDOM on 32-bit Windows:\SMSDOM-8.0.5\Windows32\SMSDOM

■ 32-bit version of SMSDOM on 64-bit Windows:\SMSDOM-8.0.5\Windows32\SMSDOM-x64

Installing Mail Security for WindowsPerforming a silent installation

14

Page 15: Smsdom Install Guide Win

■ 64-bit version of SMSDOM on 64-bit Windows:\SMSDOM-8.0.5\Windows64

4 Type the following command to run the installer in a silent mode:

setup /s /v"/qn INSTALLDIR=<path>

SMS_INSTALLLIVEUPDATE=<0/1>"

Where <path> specifies the installation directory. Ifyou do not specify a value for installing LiveUpdate,Mail Security uses the default value 0 and does notinstall LiveUpdate.

If you have specified SMS_INSTALLLIVEUPDATE=1for 64-bit SMSDOM, you can add another optionalparameter. This parameter is SMS_JAVAPATH=<pathto java> where <path to java> specifies path to thedirectory that contains java.exe. If you do not specifythis parameter, the installer attempts to search forjava.

If you are doing a cleaninstallation

setup /s /v"/qn INSTALLDIR=<path>SMS_INSTALLLIVEUPDATE=<0/1>SMS_KEEPSETTINGS=<0/1>SMS_KEEPLOG=<0/1>SMS_KEEPQUAR=<0/1>SMS_KEEPDEFS=<0/1>"

Where <path> specifies the installation directory. Ifyou do not specify a value for installing LiveUpdate,Mail Security uses the default value 0 and does notinstall LiveUpdate.

If you have specified SMS_INSTALLLIVEUPDATE=1for 64-bit SMSDOM, you can add another optionalparameter. This parameter is SMS_JAVAPATH=<pathto java> where <path to java> specifies path to thedirectory that contains java.exe. If you do not specifythis parameter, the installer attempts to search forjava.

If you do not specify a value for retaining existingdatabases, Mail Security uses the default value 1andretains the existing database.

If you are performing anupgrade

15Installing Mail Security for WindowsPerforming a silent installation

Page 16: Smsdom Install Guide Win

Post-installation tasksTable 1-5 describes the post-installation tasks that you can perform after youinstall or upgrade to Mail Security.

Table 1-5 Post-installation tasks

DescriptionTask

This text file contains compatibility information andknown issuesabout Mail Security. The ReadMe.txt file is located on theinstallation DVD and in the following directory:

\Program Files\Symantec\SMSDOM

Refer to the ReadMefile

Before you open the databases for the first time, sign the MailSecurity databases with a trusted Notes ID file.

See “Signing the Mail Security databases to certify integrity”on page 17.

Sign the Mail Securitydatabases

You cangive auser rights to enable, disable, ormodify unrestrictedagents.

See “Granting rights to run unrestricted agents ” on page 18.

Grant rights to rununrestricted agents

After you open a Mail Security database, you can save it to aworkplace for easy access.

See “Accessing Mail Security” on page 19.

Access the MailSecurity databases

The access control settings establish who can access the MailSecurity databases.

See “Restricting access to Mail Security databases” on page 20.

Set access control

You must purchase and activate a content license and productlicense to receive updated definition files and to operate any ofthe Mail Security scanning functions. For more information onactivating licenses, refer to the Symantec Mail Security 8.0.5 forDomino Implementation Guide.

Activate licenses

On a Domino partitioned server, all partitions share the sameDomino and SMSDOM program directory, and thus share one setof Domino and SMSDOM executable files.

See “Installing Symantec Mail Security on DPAR with SMSDOMsettings replication” on page 21.

Installing on Dominopartitioned servers(DPAR)

Installing Mail Security for WindowsPost-installation tasks

16

Page 17: Smsdom Install Guide Win

Signing the Mail Security databases to certifyintegrity

Before you open the databases for the first time, sign the databases with a trustedNotes ID file, using the Domino Administrator client. Signing the databases isnecessary to ensure the proper operation of all of the Mail Security features inyour Domino environment.

To properly sign the Mail Security databases, ensure that the following settingsare configured in the Domino Administrator client:

■ Sign all design documents.

■ Do not update existing signatures only.

■ Sign all data documents using an administrator ID.

■ Configure the ID as follows:

■ The ID should sign all data documents, not just those with existingsignatures.

■ The ID should be a trusted administrator’s ID or server ID.

■ The ID should have the right to run unrestricted Methods and Operations,which is necessary to run all of the database agents.

■ The ID used to sign the databases should appear on the workstation’sExecution Control List (ECL).

Ensure that the trusted Notes ID in the Execution Control List is listed with thefollowing rights in the Notes client:

■ Access to current database

■ Access to environment variables

■ Access to external code

■ Access to external programs

■ Ability to read other databases

■ Ability to modify other databases

■ Ability to export data

For more information on signing databases, see the Domino Administrator andLotus Notes documentation.

17Installing Mail Security for WindowsSigning the Mail Security databases to certify integrity

Page 18: Smsdom Install Guide Win

Granting rights to run unrestricted agentsMail Security contains agents to help youmanage database size and run scheduledqueries. You must grant rights to the user who signs the IDs.

See “Signing the Mail Security databases to certify integrity” on page 17.

The agents are as follows:

Purges events from the Log database

By default, threat incidents are purged after 365days. Server messages and other incidents arepurged every 30 days.

For information on removing documentsautomatically from the Log database, refer toSymantec Mail Security 8.0.5 for DominoImplementation Guide.

Log purge agent

Purges items from the Quarantine database

By default, all items in the Quarantine are purgedafter 30 days.

For information on removing documentsautomatically from the Quarantine database, referto Symantec Mail Security 8.0.5 for DominoImplementation Guide.

Quarantine/Backup purge agent

Runs scheduled queries in the Log database

By default, the agent runs scheduled queries oncea day and posts the queries in the CompletedReports view.

For informationongeneratingcustomizedscheduledreports, refer to Symantec Mail Security8.0.5 forDomino Implementation Guide.

Scheduled reports agent

For users to enable, disable, or modify an agent, the administrator must grantrights to run unrestricted agents in the Server Document of the server that isrunning Mail Security.

Note: Agents are disabled by default. You must enable the agents that you wantto use.

Installing Mail Security for WindowsGranting rights to run unrestricted agents

18

Page 19: Smsdom Install Guide Win

To grant users rights to run unrestricted agents

1 Open Domino Administrator.

2 On the Configuration tab, in the left pane, double-click Server.

3 In the left pane, under Server, click All Server Documents.

4 In the right (view) pane, double-click the server on whichMail Security runs.

5 On the action bar, click Edit Server.

6 On the Security tab, under Programmability Restrictions, in the Rununrestricted methods and operations box, add the users to whom you wantto grant rights to enable, disable, or modify agents.

7 On the action bar, click Save & Close.

Accessing Mail SecurityMail Security is fully integrated with the Lotus Notes environment and can beaccessed like any other database. When you open any Mail Security database, anavigation pane appears on the left. You can access any of the Mail Securitydatabases from the navigation pane.

Each Mail Security database contains options that are specific to that database.For example, the Log database contains options for server messages, productinformation, and incidents. Thenavigation pane only contains the options for thedatabases that are available and for which you have at least Reader access. Forexample, the navigation pane does not display the options for the Definitionsdatabase if it has not been created.

If you create a Definitions database, you must close all of the Mail Securitydatabases and documents.When you open any of theMail Security databases, theVirus Definitions option appears on the navigation pane.

For information about creating a Definitions database and on troubleshootinguser interface errors and issues, refer to SymantecMail Security 8.0.5 for DominoImplementation Guide.

Figure 1-1 shows the Mail Security console.

19Installing Mail Security for WindowsAccessing Mail Security

Page 20: Smsdom Install Guide Win

Figure 1-1 Mail Security console

Action bar

Navigationpane

VersionStatus pane

To access Mail Security

1 In Lotus Notes, on the File menu, click Database > Open.

2 In the Open Database dialog box, under Server, select the server on whichyou installed Mail Security.

3 Under Database, in the SAV directory, double-click SMSDOM Settings 8.0(the Settings database).

The Settings view appears.

4 Drag the Settings database window tab to any Lotus Notes bookmark folder.

Restricting access to Mail Security databasesTo maintain security in your Lotus Domino environment, restrict access to theMail Security databases to administrators by setting theAccess Control List (ACL)for following databases:

■ Settings (sav.nsf)

■ Log (savlog.nsf)

■ Quarantine (savquar.nsf)

■ Definitions (savdefs.nsf), if used

Installing Mail Security for WindowsRestricting access to Mail Security databases

20

Page 21: Smsdom Install Guide Win

TheQuarantinedatabase requires that youalso assign roles toQuarantinedatabaseusers. These roles restrict access to various Quarantine views and control whocan release documents from the Quarantine. When you set access control for theQuarantine database, you must assign roles to those groups and users who usethe Quarantine.

Formore information about theQuarantine views and assigningQuarantine roles,refer to Symantec Mail Security 8.0.5 for Domino Implementation Guide.

To restrict access to Mail Security databases

1 Log on to the account that you plan to use to administer Mail Security.

2 In Lotus Notes, right-click the Settings database, and then click Database >Access Control.

3 In the Access Control List window, add yourself, a group, or other users asnecessary to the Access Control List as Managers with Delete Documentsrights.

4 Click Default.

5 In the Access list, click No Access.

6 Click OK.

7 Repeat steps 1 - 6 for the other Mail Security databases.

Installing Symantec Mail Security on DPAR withSMSDOM settings replication

To install Mail Security on Domino partitioned servers with SMSDOM settingsreplication

1 Install SMSDOM on all the Domino partitioned servers.

2 Start any one Domino partitioned server.

This creates SAV databases on DPAR-1.

3 Modify other Domino partitioned servers' notes.ini and remove NNTASKentry from server tasks.

4 Start other Domino partitioned servers.

5 Create Replicas of SAV databases from DPAR-1 to other Domino partitionedservers.

6 Modify other Domino partitioned servers' notes.ini and add NNTASK entryto server tasks.

21Installing Mail Security for WindowsInstalling Symantec Mail Security on DPAR with SMSDOM settings replication

Page 22: Smsdom Install Guide Win

7 Start all Domino partitioned servers.

8 SMSDOM now starts on all Domino partitioned servers and SAV databasesare replicable.

Uninstalling Mail SecurityMail Security includes a setup option that lets you retain existing Mail Securitydatabases.

Before you uninstall Mail Security, disable the Symantec Premium AntiSpamservice if it is enabled. Mail Security clears all the events from the operatingsystem event log. You can take a backup of the operating system event log beforeuninstalling Mail Security for future requirements.

For more information on enabling and disabling Symantec Premium AntiSpam,refer to Symantec Mail Security 8.0.5 for Domino Implementation Guide.

To uninstall the product from the Windows control panel

1 Shut down the Lotus Domino server and also the Lotus Notes Client, if theyare on the same computer.

2 On the Domino server on which Mail Security is installed, in the WindowsControl Panel, click Add/Remove Programs.

3 Click Symantec Mail Security 8.0.5 for Domino, and then click Remove.

In the confirmation dialog box, click Yes. All Mail Security databases areretained by default.

To uninstall the product from the Windows Programs menu

1 Shut down the Lotus Domino server and also the Lotus Notes Client, if theyare on the same computer.

2 On the Domino server on which Mail Security is installed, on the Windowstaskbar, click Start > Programs > Symantec Mail Security for Domino >Uninstall Symantec Mail Security for Domino.

3 In the Installation Resume panel, click Next.

4 Whenyouareprompted tokeepexistingMail Securitydatabases and statistics,select the database and statistic descriptions that youwant to keep, and thenclick Next.

5 When the uninstallation is complete, in the Installation Wizard Completedpanel, click Finish.

Installing Mail Security for WindowsUninstalling Mail Security

22